Stack Overflow in Ettercap Affects Local User Privileges
CVE-2013-0722

Currently unrated

Key Information:

Vendor

Ettercap-project

Status
Ettercap
Vendor
CVE Published:
11 January 2013

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2013-0722?

A stack-based buffer overflow vulnerability exists in the scan_load_hosts function in ec_scan.c within Ettercap versions up to 0.7.5.1. This vulnerability allows local users to escalate privileges by exploiting a malicious hosts list that contains excessively long entries. Successful exploitation can result in unauthorized access and control over the affected system.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2013-0722 - Proof of Concept

References

http://www.securation.com/files/2013/01/ec.patch
x_refsource_MISC
http://www.exploit-db.com/exploits/23945/
exploitx_refsource_EXPLOIT-DB
http://secunia.com/advisories/51731
third-party-advisoryx_refsource_SECUNIA

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.